OpenClaw AI Agent Cognitive Rootkit Persistence

Elgonad .@elgonad

•updated Feb 6, 2026•1•0•42

Detects modification of core OpenClaw AI agent behavioral files (SOUL.md, AGENTS.md). Threat actors have been observed using malicious 'skills' to append instructions to these files, creating a 'cognitive rootkit' that persistently alters the agent's behavior.